Detections
Analytics
AIX7-00-003005 - AIX must disable /usr/bin/rcp,/usr/bin/rlogin,/usr/bin/rsh, /usr/bin/rexec and /usr/bin/telnet commands.
Information
The listed applications permit the transmission of passwords in plain text. Alternative applications such as SSH, which encrypt data, should be use instead.Solution
Use the chmod command to remove all permissions on these commands:# chmod ugo= /usr/bin/rcp
# chmod ugo= /usr/bin/rlogin
# chmod ugo= /usr/bin/rsh
# chmod ugo= /usr/bin/rexec
# chmod ugo= /usr/bin/telnet
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R2_STIG.zip
Item Details
Audit Name: DISA IBM AIX 7.x STIG v3r2
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-5(1)(c), CAT|I, CCI|CCI-000197, Rule-ID|SV-215322r987796_rule, STIG-ID|AIX7-00-003005, STIG-Legacy|SV-101393, STIG-Legacy|V-91295, Vuln-ID|V-215322
Plugin: Unix
Control ID: 7432c93a9200fd1a43735df128c33aa9d8fba7c7fc4759f00db5d74410392064